In IT security terms it is important to be able to distinguish between the three core concepts: threat, vulnerability, and risk. In order to ensure consistency the NIST has defined each concept. Which of the following is the NIST definition of a risk?"
1. The likelihood and impact (or consequence) of a threat source exercising a vulnerability
2. A system or procedure put in place without any relevant precautions
3. A weakness that could be triggered accidently or exploited intentionally to cause a security breach
4. The potential for a threat source to exercise a vulnerability

Explain the circumstances for which the interquartile range is the preferred measure of dispersion. what is an advantage that the standard deviation has over the interquartile range? choose the correct answer below. a. the interquartile range is preferred when the distribution is symmetric. an advantage of the standard deviation is that it increases as the dispersion of the data increases. b. the interquartile range is preferred when the data are not skewed or no have outliers. an advantage of the standard deviation is that it uses all the observations in its computation. c. the interquartile range is preferred when the distribution is symmetric. an advantage of the standard deviation is that it is resistant to extreme values. d. the interquartile range is preferred when the data are bell shaped. an advantage of the standard deviation is that it is resistant to extreme values. e. the interquartile range is preferred when the data are skewed or have outliers. an advantage of the standard deviation is that it uses all the observations in its computation. f. the interquartile range is preferred when the data are bell shaped. an advantage of the standard deviation is that it increases as the dispersion of the data increases.